Operation Serengeti 2.0, a large-scale international law enforcement operation coordinated by Interpol, targeted cybercriminal networks across 18 African countries, resulting in significant disruptions to illicit online activities. Conducted between June and August 2024, the operation involved authorities from Benin, Cameroon, Chad, the Democratic Republic of Congo, Gabon, Ghana, Kenya, Mauritius, Nigeria, Rwanda, Senegal, South Africa, Seychelles, Tanzania, Zambia, Zimbabwe, Côte d’Ivoire, Angola, and also included collaboration with the UK. Building on the success of its predecessor operation of the same name, Serengeti 2.0 led to the arrest of 1,209 individuals and the dismantling of nearly 12,000 cybercriminal networks, demonstrating a concerted effort to combat the growing threat of cybercrime on the continent. The operation seized almost US$100 million in assets, highlighting the substantial financial gains accrued by these criminal enterprises.
The operation specifically focused on high-impact cybercrimes, including ransomware attacks, online fraud schemes, and business email compromise, all of which pose significant threats to individuals, businesses, and global economies. Ransomware attacks, which involve encrypting victims’ data and demanding payment for its release, have become increasingly prevalent and disruptive, impacting critical infrastructure and causing substantial financial losses. Online fraud schemes encompass a wide range of deceptive practices designed to trick individuals into parting with their money or sensitive information, while business email compromise targets companies by impersonating executives or vendors to initiate fraudulent financial transactions. By prioritizing these specific crime types, Operation Serengeti 2.0 aimed to mitigate the most damaging forms of cybercrime impacting the region and beyond.
One notable success of Operation Serengeti 2.0 involved the disruption of a network operating out of Côte d’Ivoire specializing in inheritance scams targeting victims in Germany. This type of fraud, while considered a relatively old tactic, continues to be effective, as criminals prey on individuals’ hopes of unexpected financial gains. The perpetrators in this case convinced victims to pay fees to access non-existent inheritances, resulting in estimated losses of US$1.6 million. The operation led to the arrest of key suspects and the seizure of assets including electronic devices, jewelry, cash, vehicles, and documents, which can provide valuable evidence for prosecution and potentially facilitate the recovery of some stolen funds.
In Angola, the operation uncovered 25 cryptocurrency mining operations run by 60 Chinese nationals. These operations were illegally validating blockchain transactions to generate cryptocurrency, consuming substantial energy resources and potentially bypassing regulatory frameworks. Authorities confiscated 45 illegal power sources and mining equipment valued at over US$37 million, demonstrating the significant investment involved in these illicit activities. The seized generators will now be repurposed to provide electricity to underserved communities, turning a tool of criminal enterprise into a resource for public benefit. This action not only disrupts the criminal activity but also addresses the broader challenge of energy access in underserved areas, demonstrating a positive societal impact from the operation.
Zambia was another key location in Operation Serengeti 2.0, with authorities uncovering a large-scale investment scam that defrauded an estimated 65,000 victims of approximately US$300 million. This scam involved enticing individuals to invest in cryptocurrency through aggressive online advertising and the use of specifically designed mobile applications. The operation resulted in 15 arrests related to this scam, signifying a significant blow to this particular criminal network. Additionally, almost 400 forged passports from seven different countries were discovered in Zambia, leading to the disruption of a human trafficking network. This discovery highlights the interconnected nature of different criminal activities and the importance of comprehensive law enforcement efforts.
The success of Operation Serengeti 2.0 underscores the value of international collaboration in combating transnational cybercrime. By working together across borders, law enforcement agencies can pool resources, share intelligence, and coordinate efforts to effectively target criminal networks operating in multiple jurisdictions. The operation’s focus on capacity building and information sharing among participating countries further strengthens their ability to address future cyber threats. Following on the heels of the first Operation Serengeti, which took place between September and October 2024 and resulted in the arrest of over 1,000 suspected cybercriminals and the dismantling of more than 134,000 criminal networks, Serengeti 2.0 demonstrates a sustained commitment to tackling cybercrime in Africa and highlights the ongoing need for vigilant and collaborative law enforcement efforts in this evolving landscape. The operation builds upon the lessons learned and experience gained from previous operations, further refining strategies and tactics to effectively combat these complex criminal networks.